https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-03T15:25:36.858462+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2018-0501 CVE-2018-0501 2026-10-03T15:25:36.877222+00:00

Affected: APT 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3

The mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3 mishandles gpg signature verification for the InRelease file of a fallback mirror, aka mirrorfail.

 https://db.gcve.eu/vuln/usn-3746-1 USN-3746-1 — apt vulnerability 2026-10-03T15:25:36.877304+00:00

Affected: Ubuntu:18.04:LTS: apt

It was discovered that APT incorrectly handled the mirror method (mirror://). If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could potentially be used to install altered packages in environments configured to use mirror:// entries.